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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address-- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . (3 This communication is responsive to amendment filed 4/27/06 . 

2. M The allowed claim(s) is/are 1,2,5-14.17-26 and 29-36 . 

3. S Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119{a)-(d) or (f). 

a) □ All b) □ Some* c) □ None of the: 

1 . S Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
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Paper No./Mail Date . 
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Reasons For Allowance 

1. Status of Claims: Independent claims 1, 13, and 25 have been amended, amendment 
filed on April 27, 2006. Claims 1-2, 5-14, 17-26, and 29-36 are allowable for the reasons listed 
below: 

2. The above-mentioned claims are allowable over the prior art because the cited prior art of 
record fails to teach or render obvious the newly added limitations as recited in Independent 
claims, 1, 13, and 25. 

4. The prior art of record, in particular, does not teach or suggest, generating a plurality of 
records mapping access control events to access control functions along with an indication 
whether access control function invocation is active for each mapped access control event 
wherein the plurality of records are stored in a configuration file. 

5. The present invention addresses the following limitations on current access control 
mechanisms in the prior art of security: 

A) Commercial access control mechanisms are developed by developers that speciaUze in 
network security. Vendors of commercial access control mechanisms develop access control 
functionality demanded by network operators. 

B) The functionality demanded varies between network operators 

C) Some security functionality is demanded by a relatively large subset of network 
operators, other functionality is demanded by a relatively small subset of network operators 

D) Vendors of access control mechanisms are more likely to develop the more heavily 
demanded functionality, and less likely to develop less demanded functionality 
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6. Thus, the invention provides functionahty that is less demanded or special to a particular 
set of network operators. One approach to this is a hook configuration mapping, which specifies 
which access control events are extensions, and whether extension invocation is active for the 
extension event. The Hook configuration file contains set of records, and these records specify 
that an access control event is an extension event. 

7. An Example of prior art in security that does not teach or suggest, generating a plurality 
of records mapping access control events to access control functions along with an indication 
whether access control function invocation is active for each mapped access control event 
wherein the plurality of records are stored in a configuration file, is McManis. 

8. McManis discloses an executable procedure in program module A begins execution. The 
program module A that is being executed will be called procedure A and that the procedure that 
is attempting to call in program module B will be called procedure B. Prior to making a 
procedure call to an executable procedure in program module B, procedure A makes a procedure 
call to the verifier to request verification of the authenticity of program module B. The verifier 
then attempts to verify the authenticity of program module B and sends a return value to 
procedure A to indicate whether or not the verification of program module B was successful. 
McManis fail to teach or suggest, generating a plurality of records mapping access control events 
to access control functions along with an indication whether access control function invocation is 
active for each mapped access control event wherein the plurality of records are stored in a 
configuration file. 

9. Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and to avoid processing delays, should preferably accompany the issue 
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fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance", 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jenise E. Jackson whose telephone number is (571) 272-3791. 
The examiner can normally be reached on M-Th (6:00 a.m. - 3:30 p.m.) alternate Fridays. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can be reached on (571) 272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an appKcation may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Pubhc PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you would 
like assistance from a USPTO Customer Service Representative or access to the automated 
information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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